Skip to content

1.8.4 // Whitelist Logging, On-Demand File Generation, Security Hardening & Improvements

Choose a tag to compare

@ExceptedPrism3 ExceptedPrism3 released this 05 Sep 16:08
· 1 commit to main since this release

In this Build

Addition

Server Whitelist Logging

  • Multi-Action Whitelist Tracking: Captures /whitelist add <player>, /whitelist remove <player>, /whitelist on, /whitelist off, and /whitelist reload (including /minecraft:whitelist ... and console commands).
  • Multi-Channel Delivery:
    • Files: Logged directly to logs/Server Whitelist/<date>.log.
    • Discord Addon: Routed to Discord.Server-Side.Whitelist (Channel-ID or Webhook) with executing admin's avatar & name in embeds.
    • Database: Logged to server_whitelist table with auto-schema migration and index acceleration.
    • In-Game Inspector: Fully integrated into /logger view SERVER_WHITELIST.
    • Web Panel: Added server_whitelist definition in logs.php.
  • Full Localization: Translated across all 11 bundled language files (en_US, de_DE, fr_fr, es_ES, it_IT, pt_BR, ru_RU, zh_cn, ja_JP, ko_KR, ar).

On-Demand File & Folder Generation

  • Zero Startup Clutter: Directories and .log files are now created strictly on-demand when an event actually occurs, eliminating empty folders and 0-byte log files on boot across Spigot, Paper, BungeeCord, and Velocity.
  • Full Suppression Support: Completely halts file/folder generation when Log-to-Files: false (or Files.Enabled: false on Velocity) is configured.
  • Cleaner Hardening: Added null-safety checks in the retention cleaner (deleteFiles()) to prevent NullPointerException on uncreated folders.

Database Security & Driver Hardening

  • PostgreSQL Driver: Upgraded org.postgresql:postgresql to 42.7.13 (resolves SCRAM auth CPU exhaustion DoS - CVE-2026-42198 / Dependabot #23).
  • MariaDB Connector: Upgraded org.mariadb.jdbc:mariadb-java-client to 3.3.5 (resolves CVE-2026-55856, CVE-2026-55857, CVE-2026-55858 / PR #72).
  • MySQL Connector: Migrated mysql:mysql-connector-java to modern com.mysql:mysql-connector-j 8.2.0 (resolves CVE-2023-22102).

Proxy Placeholder & Event Fixes (Velocity & BungeeCord)

  • Backend Server Priority: Fixed placeholder evaluation order so %server% accurately reflects the connected backend server (e.g. lobby, survival) instead of falling back to the proxy name (#47).
  • New %proxy% Placeholder: Added %proxy% across file logs and Discord messages to explicitly reference the proxy network name.
  • Velocity Login Hardening: Safe optional server extraction (player.getCurrentServer().map(...)) on OnLogin.

Discord Addon & Staff Segregation

  • Discord Exemption: Implemented logger.exempt.discord (loggerproxy.exempt.discord) to exempt designated players from Discord alerts while keeping local/database logs intact.
  • Exemption Enforcement: Centralized logger.exempt at the entry point of LoggerManager and proxy managers.
  • Staff Channel Segregation: Prevented fallback from STAFF notifications to public player channels when a dedicated staff channel is omitted.
  • Canonical Config Location: Canonical discord.yml is now situated inside plugins/Logger/ (plugins/LoggerBungee/ on BungeeCord) with automatic migration from plugins/LoggerDiscordAddon/.
  • Custom Titles: Added optional custom Title configuration per Discord channel/webhook route.

Performance & Stability

  • Enchantment Null-Safety: Guarded against null enchantments, item stacks, and tables in ItemEnchantListener (#68). Added support for 1.21+ vanilla enchantments (Density, Breach, Wind Burst) and custom enchantments.
  • Codebase Cleanliness: Removed all 15 unused and duplicate import statements across all 189 source files.
  • Web Panel Heartbeat: Added universal server_status schema with live status detection cards for Logger Core and Discord Addon.
  • GitBook Docs Suite: Added 26-page documentation overhaul in docs/ with .gitbook.yaml for instant GitBook Git Sync.

P.S. If you want the Discord addon, join our Discord Server!